General
- Target 2026-08-14_936ef04a9a08b9298342afd7b1d6a22c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 859KB
- Sample260814-h4renaxyct
- SHA256 4ea3cab40ddcde0b0a26978e41d9ae45c01bc7636bbd215af2a49139ca433241
- MD5 936ef04a9a08b9298342afd7b1d6a22c
- SHA1 f981e5876eec75335f8499c24ba6956b1f0f438d
- SHA512 fbd16c2f74095c902f595542e4425f41f6da42750e202152b4741d916b935d11a8a0b3a9dbce7f6dd83f1089841790c37de61ea284c53fa36b1cb1fd452cfd63
- SSDEEP 12288:OwKfOVRo9yRYzWz4O8b8ITDnljFF0GEqJD:OxWVeyRYyz4O8b8ITDnljFHD
- TLSH T1E715D831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_936ef04a9a08b9298342afd7b1d6a22c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_936ef04a9a08b9298342afd7b1d6a22c_elex_remcos_smoke-loader_stealc_stop_tofsee.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_936ef04a9a08b9298342afd7b1d6a22c_elex_remcos_smoke-loader_stealc_stop_tofsee
- Size 859KB
- SHA256 4ea3cab40ddcde0b0a26978e41d9ae45c01bc7636bbd215af2a49139ca433241
- MD5 936ef04a9a08b9298342afd7b1d6a22c
- SHA1 f981e5876eec75335f8499c24ba6956b1f0f438d
- SHA512 fbd16c2f74095c902f595542e4425f41f6da42750e202152b4741d916b935d11a8a0b3a9dbce7f6dd83f1089841790c37de61ea284c53fa36b1cb1fd452cfd63
- SSDEEP 12288:OwKfOVRo9yRYzWz4O8b8ITDnljFF0GEqJD:OxWVeyRYyz4O8b8ITDnljFHD
- TLSH T1E715D831B2E5C025E4B63B344D768EB43A26BC126EB5C64F37943B1E6F716A0DD21326
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory